Threats tagged 'ghsa-94wh-5rqh-62p2'

HKUDS OpenHarness has a remote code execution vulnerability in its /bridge slash command. Remote users accepted by configuration can execute arbitrary OS commands by invoking the /bridge spawn command with attacker-controlled input. This allows spawning shell sessions as the OpenHarness process user, risking access to local files, credentials, workspace state, and repository contents.